[EPPM] Collecting Agent’s AhnReport in the Console
When submitting an inquiry regarding EPP Agent, AhnReport collected from the PC that is affected with the issue is required.
You can issue a command to collect and send AhnReport in the EPP Console unless there is any command transmission error between the EPP Server and the agent.
For instructions on how to use the Threat Report Center, please refer to [Others] Threat Report Center Guide.
To Issue AhnReport Collection Command in the Web Console
1. Go to Management > Agent in the EPP Web Console, right-click on the agent to collect AhnReport from, and then click ‘Collect AhnReport'.
2. Select the desired information type to collect and enable the debug log if necessary, then click ‘Yes'.
※ On Linux and macOS, general AhnReport is collected without any settings being applied.
- Information to Collect
- Product Error: Collects general information about the system where the error occurred and information about the installed products.
- Malware: Among the timeline information, MDP engine database information, processes and loaded modules, unsigned files are collected as suspicious files.
- Collect timeline data: When collecting AhnReport, timeline information can also be collected.
- Collection Period: AhnReport is collected for the set time period, and if the time is exceeded, the collection does not proceed. You can enter a number between 30 and 120. (Default: 60 minutes)
- Collect AhnReport after enabling debug log: Debug log is enabled for a set time, and AhnReport collection starts after the set time is over. You can enter a number between 1 and 60. (Default: 10 minutes)
3. You can view the send log for AhnReport collection command in Response > Response Status.
4. The AhnReport process will be run in the background in the agent.
To Download Collected AhnReport
Once the AhnReport is collected and uploaded on the server, you can download it from Web Console > Response > ‘Collect AhnReport/Artifact’.
※ For instructions on how to collect AhnReport directly from the affected PC, please refer to the links below.